Windows 10: Zoom issues fix for UNC vulnerability that lets hackers steal Windows credentials via chat

KErickson2 · Apr 4, 2020

Zoom issues fix for UNC vulnerability that lets hackers steal Windows credentials via chat

:)

Brink · Apr 4, 2020

Windows 10 alert: Zoom client can leak your network login credentials

On the heels of Zoom's iPhone privacy blunder, a security researcher has found that attackers can use the Zoom Windows client's group chat feature to share links that will leak the Windows network credentials of anyone who clicks on them.

Zoom is under extra scrutiny as usage of the video conference app has surged during the coronavirus COVID-19 outbreak.

The group chat feature lets users send messages to other participants in a meeting and converts URLs into hyperlinks for the recipient to open a web page in a browser.
Click to expand...

Read more: Windows 10 alert: Zoom client can leak your network login credentials | ZDNet

Brink · Apr 4, 2020

Hackers using recent MS Office vulnerabilities to distribute malware

Hackers are exploiting vulnerabilities in Microsoft Office software to spread a sophisticated form of malware capable of stealing credentials, dropping additional malware, cryptocurrency mining and conducting distributed denial-of-service (DDoS) attacks.

The malware has been active since 2016 and despite its powerful capabilities, it's available to purchase on underground forums for as little as $75.

Researchers at FireEye have observed a new campaign attempting to deliver the malware via spam emails to targets in the telecommunications, insurance and financial industries, with all of these attacks attempting to exploit recent vulnerabilities uncovered in Microsoft Office software...
Click to expand...

Read more: Hackers are using recent Microsoft Office vulnerabilities to distribute malware | ZDNet

See also: https://www.fireeye.com/blog/threat-...n-malware.html

Brink · Apr 4, 2020

Hackers using recent MS Office vulnerabilities to distribute malware

Hackers are exploiting vulnerabilities in Microsoft Office software to spread a sophisticated form of malware capable of stealing credentials, dropping additional malware, cryptocurrency mining and conducting distributed denial-of-service (DDoS) attacks.

The malware has been active since 2016 and despite its powerful capabilities, it's available to purchase on underground forums for as little as $75.

Researchers at FireEye have observed a new campaign attempting to deliver the malware via spam emails to targets in the telecommunications, insurance and financial industries, with all of these attacks attempting to exploit recent vulnerabilities uncovered in Microsoft Office software...
Click to expand...

Read more: Hackers are using recent Microsoft Office vulnerabilities to distribute malware | ZDNet

See also: https://www.fireeye.com/blog/threat-...n-malware.html

Windows 10: Zoom issues fix for UNC vulnerability that lets hackers steal Windows credentials via chat

Zoom issues fix for UNC vulnerability that lets hackers steal Windows credentials via chat

Zoom issues fix for UNC vulnerability that lets hackers steal Windows credentials via chat

Zoom issues fix for UNC vulnerability that lets hackers steal Windows credentials via chat

Zoom issues fix for UNC vulnerability that lets hackers steal Windows credentials via chat - Similar Threads - Zoom issues fix

WinVerifyTrust vulnerability fix

WinVerifyTrust vulnerability fix

Blocking credential stealing from lsass VS letting lsass free to operate?

Blocking credential stealing from lsass VS letting lsass free to operate?

Computer "Stealing" login credentials from neighboring user

Computer "Stealing" login credentials from neighboring user

Internet Explorer zero-day lets hackers steal files from Windows PCs

Hackers are exploiting an unpatched Flash Player vulnerability

Intel chip vulnerability lets hackers easily hijack fleets of PCs